Monday, January 8, 2024

NP6 not offloading cases



- TCP control flags (SYN, SYN/ACK, FIN, FIN/ACK, RST)

- One icmp/udp request and one response

- FGT wants to generate ICMP message

- An incoming packet should be fragmented  (egress packet can be fragmented by NP)

- Interface flaps

- Policy changes

- Route changes 

- UTM proxy features 

- sflow 

        -Session helper control channel

        - Manually disabled by policy


at
Labels: ,

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)

FMG doesn't provide FGD service to hidden devices

 1) If a device is hidden ( https://docs.fortinet.com/document/fortimanager/7.4.2/administration-guide/115931/hiding-unauthorized-devices), ...

  • How to troubleshoot ForitOS Security Fabric issues.
    === before troubleshooting and to save your time ===  - please make sure that you are not using VDOMs (VDOMs cannot be enabled when Security...
  • npu_state_err flags
       While investigating NPU-relevant issues, the following npu_state_err flags in the session table entry could help you identify the cause o...
  • NP6 not offloading cases
    - TCP control flags (SYN, SYN/ACK, FIN, FIN/ACK, RST) - One icmp/udp request and one response - FGT wants to generate ICMP message -...